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Claims : v 

A mobile application security system, comprising: 
a central computer for controlling the security of a mobile application; 
one or more host computers connected to the server computer, each host computer 
executing the mobile applicationlthat jumps between the hosts during execution; 

the central computer furthier comprising means for monitoring the security of the mobile 
application as it jumps between the 1 




communicated from a first host to 



: host computers wherein when the mobile application is 
. second host, it passes through the central computer; and 
wherein the security monitoring means further comprises means for detecting unwanted 
changes in the code associated with the mobile application when the mobile application is 
jumping between hosts. 

2. The system of Claini 1, wherein the detecting means further comprises means for 
storing a copy of the mobile application when the mobile application first passes through the 
server, means for receiving the mobile application after it is executed by another host and means 
for comparing the code of the mobile application after it is executed by another host to the stored 
copy of the mobile application to determine if changes have been made to the code of the mobile 
application. 

^hf A mobile application seburity system, comprising: 
a central computer for controlling the security of a mobile application; 
one or more host computers connected to the server computer, each host computer 
executing the mobile application that jumps between the hosts during execution; 
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5 the central computer further comprising means for monitoring the security of the mobile 

6 application as it jumps between the host computers wherein when the mobile application is 

7 communicated from a first host to a second host, it passes through the central computer; and 

8 wherein the security monitoring means further comprises means for preventing a host 

9 from transmitting hostile code in a mobile application to another host. 

1 4. The systemW Claim 3, wherein the preventing means further comprises means 

2 for determining if the host dispatching the mobile application is trusted, means for stripping the 

3 code from an initially received mobile application if the host is not trusted, means for saving the 

4 code of the mobile application, and means, when requested by another host, for providing the 

5 code for the mobile application to the requesting host. 

1 A mobile application security system, comprising: 

2 a central computer for controlling the security of a mobile application; 

3 one or more host computers connected to the server computer, each host computer 

4 executing the mobile application that jumps between the hosts during execution; 

5 the central computer further comprising means for monitoring the security of the mobile 

6 application as it jumps between the host computers wherein when the mobile application is 

7 communicated from a first host to a second host, it passes through the central computer; and 

8 wherein security monitoring means further comprises means for detecting unwanted 

9 changes in the state of the mobile application. 



1 6. The system of Claim f 

2 saving a copy of the state of a receive 



, wherein the detecting means further comprises means for 
mobile application, means for receiving the same mobile 



3 application after a jump to another host and means for comparing the state of the mobile 
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4 application after the jumpuo another host with the stored state of the mobile application to ensure 



that the state of the mobilelapplication has not changed. 

^ A mobile application security system, comprising: 
a central computer for controlling the security of a mobile application; 
one or more host computers connected to the server computer, each host computer 

4 executing the mobile application that jumps between the hosts during execution; 

5 the central computer further comprising means for monitoring the security of the mobile 

6 application as it jumps between the host computers wherein when the mobile application is 

7 communicated from a first host to a second host, it passes through the central computer; and 

8 wherein the security monitoring means further comprises means for detecting unwanted 

9 changes in the itinerary of the mobile application. 

1 8. The system of Claim 7, wherein the detecting means further comprises means for 

2 saving a copy of the itinerary of a received mobile application, means for receiving the same 

3 mobile application after a jump tol another host and means for comparing the itinerary of the 

4 mobile application after the jump to another host with the stored itinerary of the mobile 

I r 

5 application to ensure that the itinerary of the mobile application has not changed. 
9. The system of Claimw, wherein the itinerary comprises past historical itinerary 



1 

2 data. 

1 

2 



JjO^ A mobile application security method, comprising: 

receiving a mobile application at a central computer each time the mobile application is 



3 jumping between a first host and a second host; and 
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4 monitoring the security of the mobile application as it jumps between the host computers, 

5 wherein the security monitoring further comprises detecting unwanted changes in the code 

6 associated with the mobile application when the mobile application is jumping between hosts. 

1 11. The method of Claim 10, wherein the detecting further comprises storing a copy 

2 of the mobile applicationlwhen the mobile application first passes through the server, receiving 

3 the mobile application after it is executed by another host and comparing the code of the mobile 

4 application after it is executed by another host to the stored copy of the mobile application to 

5 determine if changes have teen made to the code of the mobile application. 

1 A mobile application security method, comprising: 

2 receiving a mobile application at a central computer each time the mobile application is 

3 jumping between a first hostland a second host; and 

4 monitoring the security of the mobile application as it jumps between the host computers, 

5 wherein the security monitoring further comprises preventing a host from transmitting hostile 

6 code in a mobile application t© another host. 

1 13. The method of Claim 1 2, wherein the preventing further comprises determining if 

2 the host dispatching the mobile application is trusted, stripping the code from an initially 

3 received mobile application if tme host is not trusted, saving the code of the mobile application, 

4 and, when requested by another post, providing the code for the mobile application to the 

5 requesting host. 

1 *t4. A mobile application security method, comprising: 

2 receiving a mobile application at a central computer each time the mobile application is 



3 jumping between a first host and z 
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4 monitoring the security of the mobile application as it jumps between the host computers, 

5 wherein the securiw monitoring further comprises detecting unwanted changes in the 

6 state of the mobile application. 

1 15. The methodlof Claim 14, wherein the detecting further comprises saving a copy of 

2 the state of a received mobile application, receiving the same mobile application after a jump to 

3 another host and comparing the state of the mobile application after the jump to another host 

4 with the stored state of the mobile application to ensure that the state of the mobile application 



has not changed. 

A mobile application security method, comprising: 
receiving a mobile application at a central computer each time the mobile application is 

3 jumping between a first host amd a second host; and 

4 monitoring the securitylof the mobile application as it jumps between the host computers, 

5 wherein the security monitoring further comprises detecting unwanted changes in the itinerary of 

6 the mobile application. 

1 17. The method of claim 1 6, wherein the detecting further comprises saving a copy of 

2 the itinerary of a received mobile application, receiving the same mobile application after a jump 

3 to another host and comparing the itinerary of the mobile application after the jump to another 

4 host with the stored itinerary of th^ mobile application to ensure that the itinerary of the mobile 

5 application has not changed. 

1 18. The method of Claiiji 16, wherein the itinerary comprises past historical itinerary 

2 data. 

1 fif^ A mobile applicationlsecurity method, comprising: 
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2 receiving a mobile application at a central computer each time the mobile application is 

3 jumping between a first lost and a second host; and 

4 monitoring the s scurity of the mobile application as it jumps between the host computers, 

5 wherein the security monitoring further comprises preventing untrusted hosts from initially 

6 launching mobile applic ations 
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